Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/83mhJlZHzFQ-Ai2yzyCQcxpMb1Q.roa
File: 83mhJlZHzFQ-Ai2yzyCQcxpMb1Q.roa (raw, json)
Hash identifier: wiqPS7Bwc9wF6WULbOqh33Hi9iUBbKBBAqunWa6vgGo=
Subject key identifier: F3:79:A1:26:56:47:CC:54:3E:02:2D:B2:CF:20:90:73:1A:4C:6F:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019F7F1783D05E875A4146F2819419E54D7F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/83mhJlZHzFQ-Ai2yzyCQcxpMb1Q.roa
Signing time: Mon 20 Jul 2026 10:34:34 +0000
ROA not before: Mon 20 Jul 2026 10:34:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44546
IP address blocks: 31.148.0.0/16 maxlen: 24
91.201.20.0/22 maxlen: 24
92.38.0.0/17 maxlen: 24
92.253.128.0/17 maxlen: 24
93.170.0.0/15 maxlen: 24
93.170.98.0/24 maxlen: 24
95.46.0.0/15 maxlen: 24
95.46.122.0/24 maxlen: 24
146.120.0.0/16 maxlen: 24
146.158.0.0/17 maxlen: 24
151.249.128.0/17 maxlen: 24
185.67.252.0/22 maxlen: 24
195.178.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:17:83:d0:5e:87:5a:41:46:f2:81:94:19:e5:4d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 20 10:34:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f379a1265647cc543e022db2cf2090731a4c6f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:73:99:37:6d:0d:61:1b:a1:15:6f:90:41:
6b:60:63:4a:2c:38:45:63:4d:f0:08:87:3a:c2:6c:
64:d0:4c:60:b9:4d:46:c7:a9:57:cb:cd:f8:77:c6:
c3:77:ff:c5:1b:ec:45:98:01:1b:15:70:6e:39:f0:
b0:3e:94:61:d5:c9:07:92:d5:8b:a5:d9:e1:f8:03:
9d:e2:07:79:5f:a0:c4:b9:de:a0:ba:c7:e2:05:79:
14:80:8d:b5:05:13:3c:70:96:4b:1b:13:54:7c:e5:
e4:47:7b:7b:15:6c:b7:b3:08:95:90:3f:ca:2e:04:
7c:30:65:0f:c0:f0:a1:39:52:88:b5:51:d2:00:72:
81:78:ec:dd:4b:07:22:da:c3:06:ae:90:56:79:0c:
51:a8:ff:e0:6b:f3:06:cf:7f:c3:0d:b3:da:13:9d:
e7:76:66:82:e8:7b:92:4f:f4:0c:f8:bc:68:09:04:
c9:4b:c3:c7:34:ac:69:2b:4f:69:f2:36:18:19:f5:
53:7c:75:dd:9a:8a:c2:ff:bd:f9:6a:4c:b2:5b:d6:
67:2e:5b:18:cb:2b:cf:7c:e4:cf:19:6a:8e:e6:12:
95:af:0c:ef:15:82:72:c4:fe:a1:76:3d:87:72:b8:
e5:a3:f3:a3:6f:04:4e:27:e4:8f:67:c9:79:0e:77:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:79:A1:26:56:47:CC:54:3E:02:2D:B2:CF:20:90:73:1A:4C:6F:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/83mhJlZHzFQ-Ai2yzyCQcxpMb1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/16
91.201.20.0/22
92.38.0.0/17
92.253.128.0/17
93.170.0.0/15
95.46.0.0/15
146.120.0.0/16
146.158.0.0/17
151.249.128.0/17
185.67.252.0/22
195.178.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:c8:52:3b:85:8f:a9:f5:46:7f:65:2f:34:6c:d3:f7:c5:50:
f1:9f:d1:fa:fc:26:de:8c:55:1f:d9:16:6c:ff:f1:76:69:a0:
6f:9b:d8:53:2f:cc:52:21:49:a6:0c:d8:ec:46:4a:85:76:d2:
b8:de:8c:4f:cb:70:1c:16:70:37:e1:61:4c:e9:9b:11:40:ea:
b1:c7:28:b4:19:d5:c1:23:d1:44:ff:76:38:da:c0:76:2a:e5:
3b:28:62:58:8e:d4:68:f8:d1:f0:e4:c4:83:6f:85:39:b7:83:
1b:60:ac:2d:3a:fb:e9:57:fa:10:fe:3e:c2:d6:f1:1b:1a:a1:
d1:00:7a:bf:6f:f9:19:6f:d5:29:ef:a5:ac:85:bc:d0:69:32:
fb:eb:cc:7d:ca:b3:bd:d1:be:c6:0e:fe:8d:92:4a:61:b6:ff:
e6:99:71:71:9b:e0:c2:52:c3:33:20:17:3f:91:9f:50:bd:ea:
d8:42:9b:17:d6:d0:17:6c:65:5f:49:25:37:80:b5:95:15:74:
5a:77:47:e0:2f:29:bd:d5:27:b4:49:7d:e6:60:cf:ff:90:94:
d5:44:22:46:41:29:b7:3f:a4:b2:c9:a8:7c:5d:ea:dc:6a:04:
65:1d:0b:05:f1:f3:81:a4:c2:7a:20:52:23:db:89:ea:6e:0a:
17:61:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:36 2026 by rpki-client